Trend Micro known exploited vulnerabilities
Every Trend Micro CVE on CISA's Known Exploited Vulnerabilities catalog, newest addition first: 12 in all, 1 added in the last 12 months.
- CVE-2026-34926A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key tableTrend Micro TrendAI Apex One
- CVE-2025-54948A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious Trend Micro Apex One
- CVE-2023-41179A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security anTrend Micro Apex One · Trend Micro Worry-Free Business Secu…
- CVE-2022-40139Improper validation of some components used by the rollback mechanism in Trend Micro Apex One and Trend Micro Apex One as a Service clients Trend Micro Apex One
- CVE-2020-8599Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary datTrend Micro OfficeScan, Trend Micro Apex One
- CVE-2020-8468Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation escTrend Micro OfficeScan, Trend Micro Apex One, Trend Micro W…
- CVE-2020-8467A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to eTrend Micro OfficeScan, Trend Micro Apex One
- CVE-2020-24557A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate aTrend Micro Apex One · Trend Micro Worry-Free Business Secu…
- CVE-2019-18187Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extracTrend Micro OfficeScan
- CVE-2022-26871An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary filTrend Micro Apex Central
- CVE-2021-36742A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.Trend Micro Apex One · Trend Micro OfficeScan +1
- CVE-2021-36741An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 1Trend Micro Apex One · Trend Micro OfficeScan +1
Get alerts for new known exploited vulnerabilities
Only want the packages you use? Check a lockfile to get a feed for your stack.
https://cve.now/kev/feed
Paste into Feedly or any RSS reader, or run /feed subscribe https://cve.now/kev/feed in Slack. For email alerts, give it to an RSS-to-email service.
https://cve.now/kev/feed?format=atom
The same entries as Atom, for readers that prefer it.
https://cve.now/kev/feed?format=json
The same entries as JSON Feed 1.1, for scripts and readers that support it.
https://cve.now/api/v1/entries?filter=kev
Pages of 30 entries, newest first. Pass the response's next_cursor as cursor for the next page.
Frequently asked questions
How many Trend Micro vulnerabilities are in CISA KEV?
12 Trend Micro vulnerabilities are on CISA's Known Exploited Vulnerabilities catalog, 1 of them added in the last 12 months. The newest is CVE-2026-34926 (Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability), added 2026-05-21.
Which Trend Micro products are in CISA KEV?
9 products, including Apex One, Apex One and Worry-Free Business Security, Apex One and Apex One as a Service. Attackers have exploited every one of these entries in the wild, and US federal agencies must patch each by its CISA due date.
Are Trend Micro KEV vulnerabilities used by ransomware?
CISA has no known ransomware use on record for Trend Micro's KEV entries.